Setup SAML 2.0 with Microsoft Entra ID

This guide walks you through configuring SAML 2.0 single sign-on (SSO) between Microsoft Entra ID (formerly Azure Active Directory) and Anzenna, enabling secure authentication across both platforms.

Prerequisites

• A role that can create and manage enterprise applications in Microsoft Entra ID (Cloud Application Administrator, Application Administrator, or Global Administrator)

• Admin access to your Anzenna account
• Your organization's Anzenna Domain ID

Step-by-Step Instructions

Step 1: Get Your Anzenna Domain ID

1. Navigate to Settings > Access > SAML

2. Toggle Enable SAML and locate the Domain ID

3. Copy this Domain ID - you'll need it for the Entra ID configuration

tip

Keep this Domain ID handy in a text editor. You'll use it multiple times in the Entra ID configuration URLs.

Step 2: Create the Enterprise Application in Entra ID

1. Sign in to the

   Microsoft Entra admin center

2. Go to Entra ID > Enterprise apps

3. Click New application, then Create your own application

4. Name the app "Anzenna" and select

   Integrate any other application you don't find in the gallery (Non-gallery)

5. Click Create

Step 3: Configure SAML Single Sign-On

1. In your new application, open Single sign-on and select SAML

2. In the Basic SAML Configuration tile, click Edit

Configure the following fields, replacing <domain-id> with your actual Domain ID from Step 1:

Field	Value
Identifier (Entity ID)	https://app.anzenna.ai/auth/saml/<domain-id>/metadata
Reply URL (Assertion Consumer Service URL)	https://app.anzenna.ai/auth/saml/<domain-id>/acs
Relay State (Optional)	https://app.anzenna.ai

Important

Make sure to replace <domain-id> with your actual Domain ID from Step 1. The URLs will not work with the placeholder text.

Click Save and close the Basic SAML Configuration panel.

Step 4: Verify Attributes & Claims

Anzenna expects the user's first name, last name, and email address. Entra ID emits these as default SAML claims, so in most tenants no change is needed — open the Attributes & Claims tile and confirm the following claims are present:

Claim name	Value
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname	user.givenname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname	user.surname
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress	user.mail

tip

If your users' mail attribute isn't populated in Entra ID, set the email claim to user.userprincipalname instead so Anzenna receives a valid email address. The Unique User Identifier (Name ID) can remain the default ( user.userprincipalname).

Step 5: Copy the Federation Metadata URL

1. Scroll to the SAML Certificates tile

2. Copy the App Federation Metadata URL - it should look like:

https://login.microsoftonline.com/<tenant-id>/federationmetadata/2007-06/federationmetadata.xml?appid=<app-id>

Step 6: Assign Users

Entra ID only sends assertions for users who are assigned to the application.

1. In the application, open Users and groups

2. Click Add user/group and assign the users (or groups) who should sign in to Anzenna via SSO

Step 7: Connect Entra ID to Anzenna

1. Back in Anzenna, navigate to Settings > Access > SAML

2. Select Microsoft Entra ID (Azure AD) as the identity provider

3. Paste the App Federation Metadata URL from Step 5 into the IDP Metadata URL field

4. Click Save

Step 8: Test Your SAML Setup

1. Log out of Anzenna completely

2. Sign in again at

   app.anzenna.ai/u/signin

   using Enterprise SSO

Testing

For the first test, use an account that is both assigned to the Entra ID application and exists in Anzenna, to verify the connection end to end.

Need help? Contact

Anzenna Support

for assistance.